Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
File:                     rVYQTCidcf2Duoh774CRkU82biE.mft (raw, json)
Hash identifier:          G3e3t2vQ0tFjoNffe6AS2zYJR6RK323TwLA6l24n/ns=
Subject key identifier:   E7:8D:E9:70:CB:31:7E:DB:DD:1D:39:CA:65:0E:F9:6D:69:5F:7F:F6
Authority key identifier: AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21
Certificate issuer:       /CN=ad56104c289d71fd83ba887bef8091914f366e21
Certificate serial:       01962E99BD5B1763FDF78037B5FE3DA69666
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft
Manifest number:          0CF3
Signing time:             Sun 13 Apr 2025 10:02:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:29 +0000
Files and hashes:         1: rVYQTCidcf2Duoh774CRkU82biE.crl (hash: nP61BK9tngNEkon7ItQgKV7uryVjZMGzNPj9xo+D/So=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:bd:5b:17:63:fd:f7:80:37:b5:fe:3d:a6:96:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad56104c289d71fd83ba887bef8091914f366e21
        Validity
            Not Before: Apr 13 10:02:29 2025 GMT
            Not After : Apr 14 10:02:29 2025 GMT
        Subject: CN=e78de970cb317edbdd1d39ca650ef96d695f7ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:d1:67:4f:0d:aa:9c:fd:63:08:ec:3c:15:
                    a4:f0:57:f4:d5:a0:38:98:79:a7:a2:48:1c:53:bd:
                    f4:aa:78:88:4e:30:cf:9d:c0:ec:c2:25:5f:22:54:
                    d6:5b:99:4a:a7:a0:4d:42:72:41:91:30:44:f4:d0:
                    e0:81:d9:0c:11:35:56:08:09:6c:7f:40:c7:4c:13:
                    a5:88:a4:6a:1a:c3:7b:0b:11:2c:c1:56:6e:0c:4e:
                    94:64:79:26:76:44:2f:90:7e:46:90:4a:57:53:0a:
                    1b:62:63:22:d8:01:8f:64:18:56:bd:bf:c3:27:b9:
                    62:44:30:15:7e:db:25:db:f2:3c:d9:ac:96:d3:b0:
                    32:95:7c:ba:5e:7a:96:54:2e:ac:b9:3c:64:76:ba:
                    03:5d:e7:45:04:30:f7:83:c3:03:56:21:d3:c9:a9:
                    e9:f1:08:a0:97:34:8a:3f:97:c3:c3:8d:50:e0:dd:
                    03:0e:d2:78:97:2e:4a:1d:0d:6c:e4:d8:96:6e:41:
                    5a:f4:7f:b7:3a:d8:14:9a:c5:93:cf:ba:6d:09:d1:
                    60:b2:09:81:b7:25:c7:b9:e1:94:0c:ef:ba:d9:52:
                    f1:19:57:c8:4e:50:1d:78:a5:08:72:ed:b0:a8:26:
                    5a:14:9d:f8:f2:da:6c:4c:69:b5:c1:be:ef:22:25:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:E9:70:CB:31:7E:DB:DD:1D:39:CA:65:0E:F9:6D:69:5F:7F:F6
            X509v3 Authority Key Identifier:
                keyid:AD:56:10:4C:28:9D:71:FD:83:BA:88:7B:EF:80:91:91:4F:36:6E:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVYQTCidcf2Duoh774CRkU82biE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e4622d-357b-4f86-8589-cda049b19143/1/rVYQTCidcf2Duoh774CRkU82biE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:67:a6:51:d5:77:b2:7e:d8:bb:ee:2b:20:37:dc:ce:9f:cf:
         40:b7:0c:bf:01:8e:d2:db:a3:e7:bc:11:5b:03:d7:b9:ff:aa:
         22:f4:dd:2b:3d:ae:1d:2e:ac:91:84:ce:a1:8d:0e:8b:4b:89:
         6d:b9:9c:ff:19:99:44:38:ac:92:13:27:29:01:dd:44:06:41:
         bb:d7:e1:f5:24:d5:ee:22:6e:23:c2:99:46:fb:d4:e5:ce:4b:
         93:c1:3f:96:fb:a2:66:2d:70:56:bc:74:71:4e:e6:bf:c1:d8:
         ba:b3:e2:a1:ea:b2:67:b1:7f:c8:8e:d1:87:33:15:8e:fd:3a:
         b5:16:80:f9:fe:eb:20:59:e6:9c:e0:76:c0:73:61:23:d4:6e:
         99:41:36:3f:20:2c:f2:ff:e5:03:ad:41:74:d4:b3:8c:05:67:
         61:04:0c:dc:48:d3:f0:5e:b4:a5:95:e3:9b:6e:ef:9a:53:01:
         fe:39:1f:ae:0f:69:7e:37:66:cf:55:77:40:88:51:78:30:00:
         09:d0:38:1f:69:91:5b:4b:f9:b0:1a:16:23:fb:08:46:28:3e:
         59:8c:ca:ec:a4:1f:df:81:ef:4c:47:ac:8d:87:4d:e7:fe:1d:
         cc:b2:ce:84:ff:9f:c8:dc:09:47:af:12:d2:e5:9a:7a:82:2e:
         87:41:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----